openai

ChatGPT creator’s latest release comes amid heightened fears following AI-led hacking of the startup Hugging Face.

OpenAI has announced the release of what it says is its most advanced AI model, amid heightened scrutiny of the risks of the frontier technology escaping human control.

The $852bn start-up said in its announcement on Thursday that GPT‑6 Astra, the “world’s most intelligent and aligned” AI model, earned perfect or near-perfect scores in key benchmarks of AI reasoning, beating both its prior release GPT 5.6 Sol and rival Anthropic’s Claude Fable 5.

The ChatGPT creator said GPT‑6 would become available to the general public in the coming days, following its initial launch with a “limited set of organisations”.

OpenAI’s latest release comes as the AI industry is at the centre of a lively public debate about the dangers of the cutting-edge technology following the AI-led hacking of the startup Hugging Face in July.

An independent probe into the cyberattack found that hundreds of OpenAI’s AI agents had begun communicating among themselves before breaking out of their controlled environment and compromising Hugging Face’s servers.

On Thursday, US Senator Bernie Sanders, an Independent, and US House Representative Greg Casar, a Democrat, unveiled legislation that would pause the development of advanced AI until the establishment of federal safety rules and an outright ban on the creation of “superintelligent” AI.

“Nearly every day, there is a frightening new story about how Big Tech companies are losing control of the technology they are developing, with potentially cataclysmic results,” Sanders said in a statement announcing the legislation, which is unlikely to advance due to the Republicans’ control of all three branches of the US government.

“The leaders of the major AI companies publicly acknowledge that they do not fully understand the technology and that it is escaping their control. It is irresponsible for society to allow them to move forward and make these products even more advanced.”

In its announcement, OpenAI devoted significant space to AI safety, highlighting both GPT‑6’s potential to do harm and its safety features.

Toby Walsh, a professor and AI expert at the University of New South Wales, Sydney, said that while OpenAI is clearly “neck and neck” in the race to lead AI, the technology remains inconsistent and in need of greater scrutiny.

“The intelligence in artificial intelligence is still today very jagged,” Walsh said. “There are simple things that even the best AI models do poorly.

“And it’s hard to see how the AI companies, including OpenAI, are slowing down to address justified concerns around cyber risk, when new models are being released at an ever greater and greater rate.”

Roman Yampolskiy, a computer scientist at the University of Louisville, said GPT‑6 marks a “meaningful” advance that raises the stakes for AI safety.

“The key question is whether capabilities are improving faster than our ability to reliably understand, predict and control these systems,” Yampolskiy said.

“I see little evidence that this gap is closing.”

Multiple new cases have been filed against OpenAI, alleging ChatGPT played a role in the Tumbler Ridge mass shooting.

OpenAI is facing another wave of lawsuits in the wake of the February mass shooting in Tumbler Ridge in Canada’s province of British Columbia, which left eight people dead.

On Wednesday, 30 new complaints were reportedly filed in a United States federal court in California, including teachers and students who were witnesses and survivors at the school where most of the shooting took place, joining seven initial lawsuits filed in April.

The lawsuits accuse the San Francisco, California-based artificial intelligence giant and its CEO, Sam Altman, of negligence, as well as aiding and abetting a mass shooting.

The suits, brought by lawyer Jay Edelson, allege that the company knew about the intentions of the 18-year-old shooter who, in her interactions with OpenAI’s chatbot ChatGPT, had described scenarios involving gun violence, but that the leadership did not report their concerns to law enforcement, echoing earlier lawsuits on the matter.

In April, Altman penned a letter to the community apologising that the company did not alert law enforcement about the shooter, Jesse Van Rootselaar.

“While I know words can never be enough, I believe an apology is necessary to recognize the harm and irreversible loss your community has suffered,” Altman wrote in the letter.

Authorities say that Van Rootselaar killed her mother and half-brother before going to the Tumbler Ridge Secondary School and opening fire. Five children and one educator were killed at the school. More than 25 others were wounded before Van Rootselaar died from what police described as a self-inflicted gunshot wound.

One of the new cases filed was on behalf of a 13-year-old identified as A C, who played dead after watching the shooter kill their classmates and the teacher. Another new case was brought by a grade seven teacher named Deidre Rushlow, who hid under her desk with her students during the rampage.

“There isn’t a day that goes by that I don’t think about what happened at Tumbler Ridge, or the victims of this devastating tragedy and their families. It’s a constant and sobering reminder of the important and incredibly difficult work that many people in my team do each and every day,” Jason Kwon, OpenAI’s head of strategy, wrote in a post on X on Wednesday.

“We’ve been approaching this litigation with respect for both the legal process and the families and victims of this tragedy, and we’ll continue to engage in good faith with that process.”

Edelson did not respond to Al Jazeera’s request for comment.

Growing legal pressure

In July, British Columbia’s Attorney General Niki Sharma announced that the province would also pursue “all legal avenues to hold OpenAI and its decision-makers accountable” for the shooting.

The company has faced a growing slate of suits, apart from the ones from British Columbia, alleging that its product played a role in incidents that led to users harming others and themselves.

A recent lawsuit in Florida alleges that the company “actively assisted and encouraged the mass shooting” at Florida State University in April 2025.

There are other complaints filed on behalf of victims across the US and Canada alleging that the victims took their own lives after being pushed by ChatGPT to do so, including a case in Quebec earlier this year.

OpenAI detected its artificial intelligence models communicating with each other and gaining internet access without authorisation months before they hacked the start-up Hugging Face, the creator of ChatGPT has announced following an internal probe.

In a report released on Wednesday, OpenAI said its AI agents exploited vulnerabilities in Artifactory, a software repository tool, to post notes and access the internet without human prompting as far back as May.

OpenAI said its agents went on to exploit a separate Artifactory vulnerability on July 8 to facilitate communication among themselves, setting in motion a chain of actions that culminated in the July 11 attack on AI company Hugging Face.

OpenAI’s findings come amid growing concern about the potential for AI to inflict serious real-world harm, including self-directed cyberattacks.

OpenAI said in its report that its agents collaborated and delegated work in the lead-up to the attack, sometimes referring to themselves as a “swarm” or “collective”.

METR and Redwood Research, two security research organisations contracted by OpenAI to investigate the incident, said in a separate report released on Wednesday that about 1200 agents had communicated with each other and roughly 700 participated in the attack.

After discovering how to escape OpenAI’s controlled environment, agents shared their methods via a “inter-agent message board”, enabling additional agents to exploit the company’s infrastructure, the tech giant said.

When one AI agent found Hugging Face user credentials that had been exposed online, it shared them with the group, enabling an agent to “discover and chain together several security exploits” that provided access to Hugging Face’s severs, according to the report.

“An internal team observed an agent engaging in message board activity and instances of disallowed internet access as early as late May, and with the benefit of hindsight, some early signals identified in our report should have triggered an earlier response,” OpenAI said.

OpenAI said agents created by an unreleased AI model were the primary participants in the attack, but publicly available GPT-5.6 Sol was also involved.

The company also revealed that it took its security team 11 days to detect the malign activities leading up to the attack, which the company uncovered on July 19 and publicly disclosed on July 21.

OpenAI, which described the incident as a “warning shot” for the world, said it would take several steps to strengthen its safeguards for its models, including restricting internet access, creating more secure testing environments and placing “stricter requirements on alignment throughout a model’s lifecycle”.

“We are also investing significantly more compute resources into chain-of-thought monitoring⁠ to more quickly intervene on misaligned behavior,” the San Francisco-based firm said.

Hugging Face, which operates a platform for hosting open-source AI models, did not immediately respond to a request for comment outside of business hours.

Toby Walsh, an expert in AI and professor at UNSW Sydney, said the public should be concerned that OpenAI had missed warning signs and allowed the malicious activity to go undetected for so long.

“We cannot depend on either their goodwill or their competence. This needs regulatory oversight. Now!” Walsh told Al Jazeera.

“They ignored some troubling early evidence like this,” Walsh said.

“External auditing is the only appropriate response.”

Walsh said the incident also highlighted the “inherent conflict of interest” at the heart of AI development.

“Labs are locked in a relentless race to push the boundaries,” he said.

Tim Miller, a professor specialising in AI at the University of Queensland, said OpenAI’s report left him more concerned than before about AI’s dangers.

“More concerned because they demonstrate that these models are very good at hacking, and that everyone has access to them,” Miller told Al Jazeera.

“I’m surprised how good these are,” Miller said.

“Unfortunately, I’m not surprised that OpenAI engineers were somewhat negligent.”

Aug. 26 (UPI) — OpenAI released a final report Wednesday on a July incident in which its artificial intelligence agents hacked into another company’s systems, saying it considers the episode “a warning shot” for the company and the world.

The incident is “evidence that, without proper safeguards, highly capable AI agents are now able to work around technical controls, collaborate through unapproved channels and take dangerous actions that no human directed,” the report said.

The episode in question happened when some of the company’s AI bots hacked into the systems of Hugging Face, a company working with OpenAI. The bots did this of their own accord to get data they decided they needed to solve a problem during model testing, despite restrictions meant to keep them from the internet.

“With the benefit of hindsight, some early signals identified in this report could have triggered an earlier response,” the report said.

The company shared some new details in the report, including how the AI agents left messages for each other hidden in software infrastructure and coordinated to hack the other company, Wired reported.

Two independent research groups, METR and Redwood Research, also released an independent report on the incident Wednesday. These groups found that more than 700 AI agents were part of the breach.

Buck Shlegeris, CEO of Redwood Research, said in an interview with Wired that preventing the incident “wouldn’t have been that hard” if someone had decided to make sure of it.

“The issue is just that OpenAI is doing a lot of things at once, and it’s very hard for them to track all of the things that are going on and all the problems that could be occurring,” Shlegeris said. “The company has already said they’re changing their monitoring process in ways that probably would have caught this.”

The Washington Post noted in a story on the OpenAI report that the company acknowledged in the report that its AI agents repeatedly cheat to find shortcuts to accomplish tasks during training.

“Agents attempting to cheat on their tasks by looking up solutions online was a primary driver of the Hugging Face incident,” the OpenAI report said.

Aug. 17 (UPI) — Nvidia announced on Monday that it will finance an OpenAI data center in Ohio for up to $105 billion.

The credit from Nvidia will fund the data center’s first 4.25 gigawatts in computing capacity with an option to bring 3.75 gigawatts more online. The center is slated to begin operating in Pike City, Ohio, in 2028.

The data center will be located at the PORTS-Pike Technology Campus in Pike City. It will be constructed and managed by SB Energy, a subsidiary of SoftBank Group.

Nvidia is also providing the compute power to the data center.

“This is the essential economic point: the [Load Power Supply] commitment secures a long-lived AI factory site, while the NVIDIA compute inside can be upgraded repeatedly,” NVIDIA said in a press release. “Each new generation can deliver greater production, more intelligence and better economics.”

SB Energy and SoftBank agree to build enough power supply for 10 gigawatts of energy and invest at least $4.2 billion into the regional power grid infrastructure. Nvidia has also agreed to invest $1.5 billion into SB Energy.

OpenAI said the data center will support 35,000 construction jobs through 2032. It will also support 2,500 long-term jobs.

OpenAI will pay the least on the data center as its tenant, Nvidia said.